I've been using Machine for the past month and it's pretty good. It handles SSL certs for docker over IP address, which is an absolute PITA to manage manually.

I've been using Machine for the past month and it's pretty good. It handles SSL certs for docker over IP address, which is an absolute PITA to manage manually. I hated creating new certificates for each machine, whereas machine does that for us. There's an open PR for adding PW protected CA key files, too. Unfortunately, we use a custom SSH port which there isn't support for. It also adds a machine-specific public SSH key for connection. The docker guys are great at accepting patches, so we can build this all if we need it.